1. OVERVIEW

1.1 BHAAV10X WEB TECHNOLOGIES LLP, operating under the brand name “Bhaarat EcoPower” (“We”, “Our”, “Us” or the “Company”), is a limited liability partnership incorporated under the laws of India, having its office at 400-A, 4th Floor, 12 Ajit Singh House, Yusuf Sarai Commercial Complex, Green Park, New Delhi – 110016, and is engaged, inter alia, in the business of renewable energy and energy infrastructure solutions, including solar energy solutions, engineering, procurement and construction, operations and maintenance, power purchase and related commercial models, battery charging and swapping infrastructure and related services (collectively, the “Services”).

Any individual who visits or uses Our Website, submits an enquiry or request for quotation, communicates with Us, or otherwise provides Personal Data to Us in connection with the Website or Services is referred to in this Privacy Policy as “You” or “Your”.

1.2 For the purposes of this Privacy Policy, “Website” means https://bhaaratecopower.com/ and the webpages, forms, functionality and services made available through or in connection with it.

1.3 We are committed to protecting the privacy and Personal Data of persons who access the Website, communicate with Us or use or enquire about Our Services. This Privacy Policy explains the types of Personal Data and other information We may collect, the purposes for which such information may be processed, the persons with whom such information may be shared, the manner in which We seek to protect such information, and the rights and choices available to You under applicable law.

1.4 This Privacy Policy applies to Personal Data collected through the Website and Personal Data otherwise provided to Us in connection with enquiries or Services through email, telephone, WhatsApp, electronic communications, site visits, physical forms or other means where such Personal Data is subsequently digitised or processed by Us in digital form. This Privacy Policy should be read together with Our Terms of Use available on Our Website.

1.5 This Privacy Policy is intended to provide You with information regarding Our processing of Personal Data. Where applicable law requires Your consent for a particular processing activity, We will seek such consent through an appropriate affirmative action. Mere access to or browsing of the Website will not, by itself, be treated as consent to processing for purposes for which affirmative consent is required under applicable law.

Where consent is relied upon, We will endeavour to ensure that the request for consent is clear, specific and linked to the purpose for which the relevant Personal Data is required.

2. INFORMATION COLLECTED BY THE COMPANY

2.1 We process Personal Data in accordance with applicable data protection and information technology laws in India, including the Information Technology Act, 2000 and the rules made thereunder, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and, to the extent that the relevant provisions are in force and applicable, the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules") (collectively, "Applicable Data Protection Laws").

For purposes of the DPDP Act, where applicable, the Company will act as the "Data Fiduciary" in respect of Personal Data for which it determines the purpose and means of processing.

2.2 We will process Personal Data only for a lawful purpose and in accordance with Applicable Data Protection Laws. Depending on the circumstances and the provisions of law then in force, such processing may be based on Your consent, on Personal Data voluntarily provided by You for a specified purpose, where processing is necessary to provide a Service requested by You, to comply with applicable legal or regulatory obligations, or on another ground expressly permitted under Applicable Data Protection Laws.

Where consent is the basis for processing under the DPDP Act, such consent will be sought in accordance with the requirements applicable to consent under the DPDP Act and DPDP Rules.

2.3 "Personal Data" means any data about an individual who is identifiable by or in relation to such data and, where applicable, includes "personal information" and "sensitive personal data or information" within the meaning of the IT Act and SPDI Rules.

Depending on Your interaction with Us, We may collect the following categories of Personal Data and related information:

  • i. Identification and contact information, including Your name, telephone/mobile number, email address and postal or site address.
  • ii. Location information provided by You, including address and PIN code.
  • iii. Business or professional information, including the name of Your organisation, designation and other information that You voluntarily provide in connection with an enquiry or commercial relationship.
  • iv. Information relevant to solar-energy enquiries, including sanctioned electrical load, current electricity board or DISCOM, loan or financing requirement, electricity-consumption or related site information voluntarily provided by You, and information required for assessing or preparing a proposed solar installation or energy solution.
  • v. Information relating to battery charging, battery swapping or other energy-infrastructure enquiries, including proposed deployment information and site-related details.
  • vi. Photographs, images or other files that You upload through the Website, including photographs of a proposed installation or deployment site.
  • vii. Communications and correspondence exchanged with Us, including enquiries submitted through Website forms, email, telephone or WhatsApp.
  • viii. Technical and usage information described in Clause 3 below.

2.4 We do not intend through the Website to collect Sensitive Personal Data or Information such as passwords, banking or payment-card credentials, health information, sexual orientation, medical records or biometric information unless such collection becomes necessary for a specific lawful purpose and is undertaken in accordance with Applicable Data Protection Laws.

You should not submit such information through general Website enquiry forms unless We have specifically requested it.

3. COLLECTION AND USE OF USAGE INFORMATION FROM THE PLATFORM

3.1 When You access the Website, certain technical information may be collected automatically, including Your Internet Protocol (IP) address, browser type, device type, operating system, referring URL, pages accessed, date and time of access, approximate location derived from technical information, Website interactions and similar technical or usage information ("Usage Information").

We may also use cookies, pixels, tags and similar technologies for functions such as Website operation, security, remembering preferences, measuring Website performance and, where applicable, analytics or marketing.

Where consent is required under Applicable Data Protection Laws for a particular cookie or tracking technology, such technology will be used in accordance with the choices made by You through the applicable consent or preference mechanism.

Further information regarding cookies and similar technologies may be provided in Our Cookie Policy available on Our Website.

3.2 We may collect Personal Data when You request a quotation, submit a solar or storage enquiry, request a proposal or pilot, upload site information, contact Us, communicate with Us by telephone, email or WhatsApp, request financing-related assistance or otherwise interact with Us in connection with Our Services.

We will use such information for the purposes disclosed to You and as otherwise permitted by Applicable Data Protection Laws.

3.3 The User may change browser settings to accept or reject cookies on personal preference. You have the ability to accept or decline cookies.

Most Web browsers automatically accept cookies, but You can usually modify the browser setting to decline cookies if You so prefer.

If You choose to decline cookies, You may not be able to sign in or use other interactive features of the Website that may depend on cookies.

If You choose to accept cookies, You also have the ability to later delete cookies that You have accepted.

If You choose to delete cookies, any settings and preferences controlled by those cookies, including advertising preferences, will be deleted and may need to be recreated.

Where the Website provides a cookie-preference or consent-management tool, You may also use that mechanism to change Your preferences in relation to non-essential cookies.

Withdrawal or modification of a cookie preference will not affect the lawfulness of processing undertaken before the preference was changed.

4. THIRD PARTY CONTENT AND LINKS TO THEIR SERVICES

4.1 The Platform may contain content that is supplied by a third party, and those third parties may collect website usage information and other information when web pages from any online or mobile services are provided to Your browser.

In addition, when You are using the Platform, You may be directed to other websites that are operated and controlled by third parties that we do not control. We are not responsible for the privacy practices employed by any of these third parties.

These other websites may send their own cookies to You, independently collect data or solicit Personal Data and may or may not have their own published privacy policies.

When You leave the Platform, we encourage You to read the privacy statements of all third party websites before submitting any information to third parties.

4.2 The Website may contain links to or integrations with third-party services, including communications, social-media, mapping, analytics or similar services.

Where You leave Our Website or independently interact with a third-party website or service, the privacy practices of that third party will apply.

This does not affect Our responsibility under Applicable Data Protection Laws for any third-party service provider that processes Personal Data on Our behalf as Our Data Processor or service provider.

5. SECURITY OF PERSONAL INFORMATION COLLECTED

5.1 We may engage employees, affiliates, contractors and third-party service providers to process Personal Data for the purposes described in this Privacy Policy.

Access to Personal Data will, so far as reasonably practicable, be limited to persons who require such access for the relevant purpose and will be subject to appropriate confidentiality, contractual, technical and organisational safeguards.

5.2 We will implement reasonable security practices and procedures appropriate to the nature of the Personal Data processed and the risks associated with such processing, including, as applicable, access controls, secure storage, appropriate authentication, monitoring and logging, backups, encryption or other appropriate data-security measures, and contractual security requirements for service providers processing Personal Data on Our behalf.

6. USE OF PERSONAL INFORMATION FOR DIRECT MARKETING PURPOSES

6.1 Where You separately choose to receive promotional, marketing or other non-essential communications from Us, We may use the contact information provided by You for such purpose in accordance with Your consent and Applicable Data Protection Laws.

6.2 Consent to receive promotional or marketing communications will not be treated as a condition for submitting a general enquiry or requesting information regarding Our Services unless such communication is necessary for the specific service requested by You.

6.3 You may withdraw Your consent to marketing communications at any time by using an unsubscribe facility included in the relevant communication, where available, or by contacting Us at legal@bhaaratecopower.com .

We will also comply with applicable telecommunications and commercial-communications requirements in relation to calls, SMS, WhatsApp or other electronic marketing communications.

7. DATA TRANSFER

7.1 Personal Data may be stored or processed by Us or Our service providers in India or, where applicable, in other jurisdictions.

Any transfer of Personal Data outside India will be undertaken in accordance with Applicable Data Protection Laws.

7.2 To the extent the SPDI Rules apply to a transfer of Sensitive Personal Data or Information, We will comply with the requirements applicable to transfers under those Rules, including requirements concerning the level of protection afforded by the recipient and the lawful basis for such transfer.

Upon the relevant provisions of the DPDP Act and DPDP Rules becoming applicable, transfers of Personal Data outside India will also be subject to any restrictions or requirements specified by the Central Government under such law.

8. RIGHTS OF USERS AND DATA PRINCIPALS

8.1 Subject to Applicable Data Protection Laws and to the extent the relevant statutory provisions are in force and applicable to You, You may have the right to:

  • i. Request information regarding the Personal Data being processed by Us and the processing activities undertaken in relation to such Personal Data.
  • ii. Request correction of inaccurate or misleading Personal Data.
  • iii. Request completion of incomplete Personal Data or updating of Personal Data.
  • iv. Request erasure of Personal Data where retention is no longer required for the specified purpose or under applicable law.
  • v. Withdraw consent where processing is based on Your consent.
  • vi. Raise a grievance regarding Our processing of Your Personal Data or the exercise of Your rights.
  • vii. Where the DPDP Act applies, nominate another individual who may exercise Your rights under the DPDP Act in the event of Your death or incapacity.
  • viii. Exercise such other rights as may be available to You under Applicable Data Protection Laws from time to time.

8.2 Requests may be submitted to legal@bhaaratecopower.com . We may take reasonable steps to verify Your identity before acting on a request.

Certain requests may be refused or limited where processing or retention is required or permitted by applicable law.

8.3 Where the applicable provisions of the DPDP Act are in force, You may avail Our grievance-redressal mechanism before making a complaint to the Data Protection Board of India in accordance with the DPDP Act and DPDP Rules.

9. CONSENT AND WITHDRAWAL OF CONSENT

9.1 Where consent is required for processing Personal Data, We will seek consent through a request that is presented in clear and plain language and identifies the Personal Data and specified purpose for which it is proposed to be processed, together with such other information as is required under Applicable Data Protection Laws.

9.2 Where the applicable provisions of the DPDP Act are in force, consent relied upon by Us will be free, specific, informed, unconditional and unambiguous and will involve clear affirmative action by the Data Principal.

9.3 You may withdraw consent at any time where consent forms the basis of processing. We will provide a mechanism for withdrawal that is reasonably comparable in ease to the mechanism through which consent was obtained.

Withdrawal will not affect the lawfulness of processing undertaken before such withdrawal.

Following a valid withdrawal, We will cease, and where required cause relevant Data Processors to cease, processing based on that consent within a reasonable period unless continued processing is permitted or required by law.

10. USE OF INFORMATION COLLECTED

10.1 We may process Personal Data for one or more of the following purposes, depending on Your interaction with Us:

  • i. Responding to Your enquiries and communications.
  • ii. Assessing Your requirements and providing quotations, proposals or information regarding Our Services.
  • iii. Evaluating the feasibility of solar, battery charging, battery swapping or other energy-infrastructure projects.
  • iv. Arranging or conducting site assessments, surveys or related project evaluation.
  • v. Communicating with You by telephone, email, WhatsApp or other means in relation to an enquiry or Service requested by You.
  • vi. Where requested by You, facilitating or evaluating financing or loan-related requirements.
  • vii. Providing, administering, operating, maintaining or improving Our Services and business operations.
  • viii. Maintaining business records, handling complaints and providing customer support.
  • ix. Operating, maintaining, securing, troubleshooting and improving the Website.
  • x. Analysing Website usage and performance, subject to applicable consent requirements.
  • xi. Detecting or preventing fraud, misuse, cyber-security incidents or unlawful activity.
  • xii. Establishing, exercising or defending legal rights and claims.
  • xiii. Complying with applicable legal, regulatory, tax, accounting, governmental or law-enforcement requirements.
  • xiv. Sending marketing or promotional communications where You have consented to such communications or where otherwise expressly permitted by applicable law.

10.2 We may disclose Personal Data, to the extent reasonably necessary for the relevant purpose, to:

  • i. Our authorised personnel and affiliates.
  • ii. Website hosting, cloud, IT, CRM, communications, analytics and other technology service providers.
  • iii. Contractors, consultants, installation partners, EPC/O&M providers and other parties involved in evaluating or delivering Services requested by You.
  • iv. Financing or lending partners where You request financing-related assistance and such disclosure is lawfully permitted.
  • v. Electricity distribution companies, governmental, regulatory or other competent authorities where required.
  • vi. Auditors, lawyers, accountants, insurers and other professional advisers.
  • vii. Law-enforcement agencies, courts, tribunals, regulators or governmental authorities where disclosure is required or permitted by law.
  • viii. A purchaser, successor or other relevant party in connection with a proposed or completed merger, restructuring, financing, acquisition, transfer or sale of all or part of Our business or assets, subject to applicable law.

10.3 Where a third-party service provider processes Personal Data on Our behalf, We will take reasonable steps to ensure that such processing is subject to appropriate contractual, confidentiality and security requirements in accordance with Applicable Data Protection Laws.

10.4 We, our affiliates or third party service providers may use Personal Data or Usage Information collected in the following ways:

  • i. To operate and improve the Platform and tools associated with the Platform.
  • ii. To create aggregated and anonymized information to determine which Platform features are most popular and useful to Users.
  • iii. To prevent, discover and investigate violations of this Privacy Policy or the Terms and Conditions.
  • iv. To customize the content or the Services on the Platform for You.
  • v. To provide You the Services.
  • vi. To improve our ability to provide You the Services.
  • vii. To observe, improve and administer the quality of Services.
  • viii. To analyse how the Platform is used and diagnose technical problems.
  • ix. To remember the basic information provided by You for effective access.
  • x. To confirm Your identity in order to determine Your eligibility to use the Platform and avail the Services.
  • xi. To notify You about any changes to the Platform.
  • xii. To transmit, share or transfer the data to a group company or affiliate of Us to enable such group company or Affiliate to provide You with the Services.
  • xiii. To enable Us to comply with Our legal and regulatory obligations.
  • xiv. For sending administrative notices, Service-related alerts and similar communications.
  • xv. To do market research, troubleshooting or project planning.
  • xvi. To protect against errors, fraud and other criminal activity.
  • xvii. To reinforce the Terms of Use.

10.5 We may create, use and share aggregated or anonymised information that does not identify, and cannot reasonably be used to identify, an individual, for purposes including Website analytics, business analysis, service improvement, statistical analysis, research and planning.

To the extent that such information has been irreversibly anonymised so that no individual is identifiable by or in relation to such information, it will not be treated as Personal Data for the purposes of this Privacy Policy.

Where information is capable of identifying an individual, whether by itself or when combined with other information reasonably available to Us, We will continue to treat such information as Personal Data in accordance with this Privacy Policy and Applicable Data Protection Laws.

10.6 We may access, preserve, use, transfer or disclose Your Personal Data where such action is reasonably necessary and permitted or required under applicable law, including:

  • i. To comply with any applicable law, regulation, court order, governmental request or legal process.
  • ii. To respond to requests from governmental, regulatory, judicial or law-enforcement authorities having lawful authority to seek such information.
  • iii. To protect the rights, property, safety or security of the Company, Our personnel, Users, the Website, the Services or any other person.
  • iv. To detect, prevent, investigate or address fraud, cyber-security incidents, technical issues or other unlawful activity.
  • v. To establish, exercise or defend legal claims or rights.
  • vi. Where disclosure is otherwise permitted or required under Applicable Data Protection Laws.

Where legally permissible and reasonably practicable, We will handle such disclosures in a manner that limits the Personal Data disclosed to that which is reasonably necessary for the relevant purpose.

We may not provide prior notice of a disclosure where notification is prohibited by law, would prejudice an investigation or legal process, or would otherwise be inappropriate having regard to the circumstances and applicable law.

We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. Thus, we may access, use, store, transfer and disclose Your information, including Personal Data, including disclosure to third parties such as government or law enforcement officials or private parties as we reasonably determine is necessary and appropriate.

Such disclosures may be carried out without notice to You.

11. SECURITY MEASURES

11.1 We maintain reasonable technical and organisational security measures designed to protect Personal Data against unauthorised access, acquisition, disclosure, alteration, loss, destruction or other unauthorised processing.

Such measures may include appropriate access controls, authentication mechanisms, secure storage, encryption or masking where appropriate, monitoring and logging, backups, incident-response procedures and contractual safeguards with service providers.

11.2 We periodically review Our security measures having regard to the nature of the Personal Data, the nature and scope of processing, technological developments and applicable legal requirements.

11.3 While We take reasonable security measures, no transmission over the Internet or electronic storage system can be guaranteed to be completely secure.

Nothing in this Privacy Policy excludes or limits any responsibility or obligation imposed upon Us under applicable law.

12. DATA RETENTION

12.1 We will retain Personal Data only for so long as is reasonably necessary to fulfil the specified purpose for which it was collected or processed, including for the provision of Services requested by You, and thereafter only to the extent required or permitted for compliance with applicable legal, regulatory, accounting, taxation, contractual, dispute-resolution or other legitimate retention requirements under applicable law.

12.2 When Personal Data is no longer required for the specified purpose and no applicable law requires or permits its continued retention, We will take reasonable steps to erase or anonymise such Personal Data.

12.3 Notwithstanding the above, We may retain Personal Data, traffic data, security logs and processing records for any minimum period required under Applicable Data Protection Laws, cyber-security directions or other applicable law.

13. PERSONAL DATA BREACH

13.1 In the event of an actual or suspected Personal Data breach, We will take reasonable steps to identify, contain, investigate, mitigate and remediate the breach.

We will notify affected individuals, the Indian Computer Emergency Response Team (CERT-In), the Data Protection Board of India and/or any other competent authority where and within the time period required under applicable law.

13.2 Where the applicable breach-notification provisions of the DPDP Act and DPDP Rules are in force, We will provide affected Data Principals with the information required under such provisions in a concise, clear and plain manner and make the notifications to the Data Protection Board required by applicable law.

14. CHILDREN’S PRIVACY

14.1 The Website and Our Services are intended primarily for adults and businesses and are not directed at children.

For purposes of this Privacy Policy, "child" will have the meaning assigned under Applicable Data Protection Laws and, under the DPDP Act, means an individual who has not completed eighteen years of age.

14.2 We do not knowingly seek to collect Personal Data from children through the Website.

If We become aware that Personal Data of a child has been collected in circumstances requiring parental or guardian consent, We will take appropriate steps in accordance with Applicable Data Protection Laws, including obtaining verifiable consent where required or deleting the Personal Data where appropriate.

14.3 To the extent the applicable provisions of the DPDP Act are in force, We will not undertake processing likely to cause a detrimental effect on the well-being of a child or undertake tracking or behavioural monitoring of children or targeted advertising directed at children, except where an applicable statutory exemption applies.

15. CORRECTION, UPDATING AND ERASURE OF PERSONAL DATA

15.1 You are responsible for ensuring that the information You provide to Us is accurate and complete.

If Personal Data provided by You is inaccurate, incomplete or requires updating, You may contact Us at legal@bhaaratecopower.com .

15.2 Subject to Applicable Data Protection Laws, You may also request correction, completion, updating or erasure of Personal Data by contacting Us using the details specified below.

We may retain information notwithstanding such a request where continued retention is necessary or permitted for the specified purpose or for compliance with applicable law.

16. YOUR FEEDBACK AND GRIEVANCES

16.1 If You have any question, concern, complaint or grievance regarding this Privacy Policy, the processing of Your Personal Data, or the exercise of Your rights, You may contact Our Grievance Officer / Privacy Contact at:

Name: Abhishek Sinha

Designation: Founder

Company: BHAAV10X WEB TECHNOLOGIES LLP

Address: 400-A, 4th Floor, 12 Ajit Singh House, Yusuf Sarai Commercial Complex, Green Park, New Delhi – 110016

Email: legal@bhaaratecopower.com

16.2 We will acknowledge and address grievances in accordance with Applicable Data Protection Laws.

To the extent Rule 5(9) of the SPDI Rules applies, grievances will be addressed within one month from the date of receipt.

16.3 Upon the applicable provisions of the DPDP Act becoming effective, the contact details above may also serve as the business contact information of the person authorised to respond on Our behalf to questions raised by Data Principals regarding processing, unless We notify a different person in accordance with applicable law.

17. CHANGES TO THE PRIVACY POLICY

17.1 We may update this Privacy Policy from time to time to reflect changes in Our Services, Website, data-processing activities, technology or applicable law.

The updated Privacy Policy will be published on the Website together with the date on which it was last updated.

17.2 Where a change materially affects the purpose for which Personal Data is processed or otherwise requires fresh consent or notice under Applicable Data Protection Laws, We will provide the required notice and obtain fresh consent where legally required before undertaking the relevant processing.

18. CONTACT INFORMATION

18.1 For questions regarding this Privacy Policy, Your Personal Data, withdrawal of consent, correction, updating or erasure requests, marketing preferences, or any privacy-related grievance, You may contact Us at:

BHAAV10X WEB TECHNOLOGIES LLP

Operating under the brand “Bhaarat EcoPower”

400-A, 4th Floor, 12 Ajit Singh House, Yusuf Sarai Commercial Complex, Green Park, New Delhi – 110016

Phone: 011-46085344

Grievance Officer / Privacy Contact:

Name: Abhishek Sinha

Designation: Founder

Email: legal@bhaaratecopower.com

The latest version of this Privacy Policy is available on the Website.

19. DATA MINIMISATION AND ACCURACY

19.1 We will endeavour to collect and process only such Personal Data as is reasonably necessary for the specified purpose for which it is collected, subject to Applicable Data Protection Laws.

Where Personal Data is likely to be used to make a decision affecting You or disclosed to another Data Fiduciary where required under applicable law, We will make reasonable efforts to ensure that such Personal Data is complete, accurate and consistent.

20. FILES AND SITE PHOTOGRAPHS

20.1 Where the Website permits You to upload photographs, documents or other files for purposes such as assessing a proposed installation or deployment site, We will process such files for the purpose for which they were submitted and for related communications and evaluation of the requested Services.

20.2 You should avoid including unnecessary Personal Data in photographs or documents uploaded through the Website.

Where reasonably possible, You should avoid submitting photographs containing identifiable individuals, identification documents, financial information or other sensitive information unless such information is specifically requested by Us and is necessary for the relevant purpose.

CONSENT